Red Hat Security AdvisoryRHSA-2008:0848
libtiff security and bug fix update
Released 2008-08-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 libtiff-3.6.1-12.el4_7.2, libtiff-3.6.1-12.el4_7.2.i386, libtiff-3.6.1-12.el4_7.2.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 libtiff-3.6.1-12.el4_7.2, libtiff-3.6.1-12.el4_7.2.i386, libtiff-devel-3.6.1-12.el4_7.2 +1
- Red Hat Enterprise Linux ES version 4 libtiff-3.6.1-12.el4_7.2, libtiff-3.6.1-12.el4_7.2.i386, libtiff-3.6.1-12.el4_7.2.ia64 +3
- Red Hat Enterprise Linux WS version 4 libtiff-3.6.1-12.el4_7.2, libtiff-3.6.1-12.el4_7.2.i386, libtiff-3.6.1-12.el4_7.2.ia64 +3
Fixes 2 records
Priority MEDIUM 41
Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05414 · Published 2006-06-08 · Fixed
Priority LOW 37
Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0413 · Published 2008-08-27 · Fixed CWE-119
